From: | John Slattery <johntslattery(at)gmail(dot)com> |
---|---|
To: | Hiroshi Inoue <inoue(at)tpf(dot)co(dot)jp> |
Cc: | pgsql-odbc(at)postgresql(dot)org |
Subject: | Re: GSSAPI Authentication Problem |
Date: | 2012-08-07 14:13:24 |
Message-ID: | CA+hybRU0expO0Ndpt23pnHQJYkoza5qY4OKuJ=C-H=0KDaN2xw@mail.gmail.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-odbc |
On Tue, Aug 7, 2012 at 5:51 AM, Hiroshi Inoue <inoue(at)tpf(dot)co(dot)jp> wrote:
> (2012/08/07 1:02), John Slattery wrote:
>>
>> On Sat, Aug 4, 2012 at 3:50 AM, Hiroshi Inoue <inoue(at)tpf(dot)co(dot)jp> wrote:
>>>
>>> Hi John,
>>>
>>>
>>> (2012/08/03 21:31), John Slattery wrote:
>>>>
>>>>
>>>> Hi,
>>>>
>>>> I would like to report what seems like a problem with the driver. It
>>>> doesn't seem possible to override the default user name for
>>>> authentication by GSSAPI. I'm using a map in pg_ident.conf since my
>>>> Active Directory user name isn't the same as my Postgresql user name.
>>>> pgAdmin III and psql allow for this, the former by setting Username in
>>>> the GUI to my Postgresql user name and the latter by specifying the -U
>>>> option. I tried setting UID in the connection string I am using to my
>>>> Postgresql user name but that caused the driver to return the
>>>> following exception:
>>>>
>>>> Run-time error '-2147217843 <tel:2147217843> (800040e4d)':
>>>>
>>>> Service negotiation failed;
>>>> The specified target is unknown or unreachable in
>>>> DoKerberosEtcProcessAuthentication:PerformKerberosEtcClientHandSh
>>>
>>>
>>>
>>> How do you login to your Kerberos system?
>>>
>>> regards,
>>> Hiroshi Inoue
>>>
>>
>> Hiroshi,
>>
>> I'm not sure I understand your question, but I'll take a shot at
>> answering it. The client is Windows XP, so I would say I'm using the
>> standard/default Windows GINA for Winlogon.
>
>
> OK I'd like to confirm SSPI is used.
> Could you try to set SSLMODE to 'allow' with the user name John?
>
> regards,
> Hiroshi Inoue
>
Hiroshi,
I set 'User Name' = 'john' and changed 'SSL Mode' from 'disable' to 'allow'.
It worked.
And I'm baffled. Is there a reason it shouldn't work with 'SSL Mode' =
'disable'? Would you explain?
Thank you.
John
From | Date | Subject | |
---|---|---|---|
Next Message | Hiroshi Inoue | 2012-08-07 18:42:07 | Re: GSSAPI Authentication Problem |
Previous Message | Hiroshi Inoue | 2012-08-07 10:51:43 | Re: GSSAPI Authentication Problem |